A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c (CVE-2018-14622)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the version of the libtirpc package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A null-pointer dereference vulnerability was found in     libtirpc before version 0.3.3-rc3. The return value of     makefd_xprt() was not checked in all instances, which     could lead to a crash when the server exhausted the     maximum number of available file descriptors. A remote     attacker could cause an rpc-based application to crash     by flooding it with new connections.(CVE-2018-14622)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of libtirpc installed on the remote host is prior to 0.2.4-0.16.15. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1362 advisory.

    A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value     of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted     the maximum number of available file descriptors. A remote attacker could cause an rpc-based application     to crash by flooding it with new connections. (CVE-2018-14622)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for libtirpc fixes the following issues :

Security issues fixed :

CVE-2018-14621: libtirpc: Infinite loop in EMFILE case in svc_vc.c (bsc#1106519)

CVE-2018-14622: libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c (bsc#1106517)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3759-1 advisory.

    Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
    (CVE-2016-4429)

    It was discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this     issue to cause a denial of service. (CVE-2018-14622)

    It was discovered that libtirpc incorrectly handled certain strings. An attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
    (CVE-2017-8779)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2018-14622 Fix for egmentation fault due to pointer becoming NULL.

For Debian 8 'Jessie', this problem has been fixed in version 0.2.5-1+deb8u2.

We recommend that you upgrade your libtirpc packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199496	RHEL 6 : libtirpc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195616	RHEL 6 : libtirpc (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
153308	EulerOS 2.0 SP2 : libtirpc (EulerOS-SA-2021-2401)	Nessus	Huawei Local Security Checks	high
145180	EulerOS 2.0 SP3 : libtirpc (EulerOS-SA-2021-1090)	Nessus	Huawei Local Security Checks	high
135938	Amazon Linux AMI : libtirpc (ALAS-2020-1362)	Nessus	Amazon Linux Local Security Checks	high
118141	SUSE SLES11 Security Update : libtirpc (SUSE-SU-2018:3146-1)	Nessus	SuSE Local Security Checks	high
117331	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libtirpc vulnerabilities (USN-3759-1)	Nessus	Ubuntu Local Security Checks	high
112226	Debian DLA-1487-1 : libtirpc security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-14622

high

Tenable Plugins

high

high

high

high

high

high

high

high